🇹🇷
TuncerKARAARSLAN
2026-09-04 15:15:00
(1 week ago)
Digital Guard AI Host Defense: Network Anomaly: Port Sweep / Multi-Port Scan (Instantly banned on ho ...
show more
Digital Guard AI Host Defense: Network Anomaly: Port Sweep / Multi-Port Scan (Instantly banned on host firewall on 2026-09-04 15:15:00 UTC).
show less
Port Scan
🇮🇹
Progetto1
2025-07-31 10:18:02
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnsf
2025-07-25 15:05:01
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇦🇺
weblite
2025-07-20 21:11:25
(1 year ago)
WP_MALWARE_PROBE
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 07:46:55
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 03:46:49.661577 2025] [security2:error] [pid 14233:tid 14233] [client 104.247.179.66:54098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stmaarten.fishing"] [uri "/wp-config.php_orig"] [unique_id "aHye6RivFCGh516MeE0CPQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 06:28:18
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 02:28:13.522821 2025] [security2:error] [pid 27138:tid 27138] [client 104.247.179.66:38968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teatrosohomadrid.com"] [uri "/wp-config.php_old"] [unique_id "aHyMfVRGcLqsyovxFPFCEQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2025-07-19 23:21:48
(1 year ago)
Restricted File Access Attempt. Matched phrase "wp-config.php" at REQUEST_FILENAME. (930130-122)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 08:50:59
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 04:50:53.223833 2025] [security2:error] [pid 23626:tid 23626] [client 104.247.179.66:34256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networkmediasoftware.com"] [uri "/wp-config.php_orig"] [unique_id "aHtcbe96qNSTSLnKU025xwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-18 13:20:51
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-18 11:25:52
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇬🇧
blik2108
2025-07-18 01:27:17
(1 year ago)
solentyachtcharter.com:80 104.247.179.66 - - [18/Jul/2025:02:27:16 +0100] "GET /wp-config.php1 HTTP/ ...
show more
solentyachtcharter.com:80 104.247.179.66 - - [18/Jul/2025:02:27:16 +0100] "GET /wp-config.php1 HTTP/1.1" 301 567 "-" "-"
solentyachtcharter.com:443 104.247.179.66 - - [18/Jul/2025:02:27:16 +0100] "GET /wp-config.php1 HTTP/1.1" 404 5386 "-" "-"
solentyachtcharter.com:80 104.247.179.66 - - [18/Jul/2025:02:27:16 +0100] "GET /wp-config.phpold HTTP/1.1" 301 571 "-" "-"
solentyachtcharter.com:443 104.247.179.66 - - [18/Jul/2025:02:27:17 +0100] "GET /wp-config.phpold HTTP/1.1" 404 5386 "-" "-"
solentyachtcharter.com:80 104.247.179.66 - - [18/Jul/2025:02:27:17 +0100] "GET /wp-config.php.org HTTP/1.1" 301 573 "-" "-"
...
show less
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-18 00:30:08
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇫🇮
paissangroup
2025-07-15 22:46:03
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 18:28:18
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 104.247.179.66 (mt-middle-da.guzelhosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 14:28:14.697294 2025] [security2:error] [pid 22718:tid 22718] [client 104.247.179.66:51638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yellowbrickfoundation.com"] [uri "/wp-config.php.old"] [unique_id "aHadvsUOAUlQzxVyT4Gf-wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
advena
2025-07-14 02:00:54
(1 year ago)
104.247.179.66 (AS42846 GUZELHOSTING GNET INTERNET TELEKOMUNIKASYON A.S.) was intercepted at 2025-07 ...
show more
104.247.179.66 (AS42846 GUZELHOSTING GNET INTERNET TELEKOMUNIKASYON A.S.) was intercepted at 2025-07-14T01:58:23Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
show less
Web Spam
Hacking
Brute-Force
Web App Attack
